In the Claims ; 

Please amend claims 1, 8 and 15 as follows: 

1 . (Currently Amended) In a system including a plurality of primary storage subsystems, 
a plurality of secondary storage subsystems that are connected to each other via a 
network, and a host computer including a remote copy manager (RCM) and being 
connected with the secondary storage subsystems, a method for remotely copying data 
from each of a plurality of primary volumes to a corresponding secondary volume of a 
plurality of secondary volumes, wherein the primary volumes are constituted by the 
primary storage subsystems, and wherein the secondary volumes are constituted by 
the secondary storage subsystems, the method comprising: 

(1) a normal synchronizing procedure including: 

receiving, at each of the secondary storage subsystems, remote copy requests 
each of which is associated with a timestamp from each one of the plurality of 
primary storage subsystems; 

receiving periodically , at each of the secondary storage subsystems, 
synchronizing requests each of which is associated with a timestamp and a primary 
storage ID of a primary storage subsystem, which sends a respective synchronizing 
request, from said each one of the primary storage subsystems respectively; 

determining, at each of the secondary storage subsystems, a first time as a first 
time parameter based on timestamps included in the synchronizing requests; and 

determining, at each of the secondary storage subsystems, which remote copy 
requests to process based on the first time parameter, primary storage IDs and 
timestamps associated with the remote copy requests, thereby maintaining data I/O 
consistency among said storage subsystems; and 

(2) an after-failure synchronizing procedure including: 
suspending said remote copy requests after a failure occurs; 

collecting and comparing by the RCM in the host computer time parameters 
stored in the secondary storage systems to determine a synchronized time; 

receiving from the RCM in said host computer at each of the secondary 
storage subsystems sjmchronizing requests each of which includes said synchronized 
time; 

updating second time parameters at each of the secondary storage subsystems 
up to said synchronized time; and 



J 

determining, at each of the secondary storage subsystems, which remote copy 
requests to process based on said updated second time parameter, thereby maintaining 
data I/O consistency among said storage subsystems. 

2. (Previously Presented) The method of claim 1, wherein the normal synchronizing 
procedure further includes: 

performing, at each of the secondary storage subsystems, write processing in 
accordance with remote copy requests that are associated with timestamps indicating 
an earlier time than the first time. 

3. (Previously Presented) The metfiod of claim 1, wherein the normal synchronizing 
procedure further includes: 

managing, at each of the secondary storage subsystems, a second time 
parameter for each of the primary storage subsystems; and 

updating corresponding second time parameters at each of the secondary 
storage subsystems in response to whether timestamps associated with the 
synchronizing requests indicate a later time than the corresponding second time 
parameters of the second storage subsystems. 

4. (Original) The method of claim 3, wherein the first time is the earliest time indicated 
by the second time parameters. 

5. (Previously Presented) The method of claim 1, wherein the determining step in the 
afler-failure synchronizing procedure involves updating a secondary volume 
corresponding to the determined remote copy request. 

6. (Previously Presented) The method of claim 1, wherein the determining step in the 
afler-failure synchronizing procedure involves selecting remote copy requests which 
are received by the secondary storage subsystems prior to tiie suspension and have a 
first time parameter smaller than or equal to said synchronized time to be processed so 
as to update a corresponding secondary volume. 

7. (Previously Presented) The method of claim 6, wherein remote copy requests which 
are received by the secondary storage subsystems prior to the suspension and have a 
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first time parameter bigger than said synchronized time are used to update a bitmap of 
a corresponding secondary storage subsystem. 

8. (Currently Amended) A software residing in a computer readable storage medium for 
remotely copying data from each of a plurality of primary volumes to a corresponding 
secondary volume of a plurality of secondary volumes implemented in a data storage 
system that includes a plurality of primary storage subsystems, a plurality of 
secondary storage subsystems that are coimected to each other via a network, and a 
host computer including a remote copv manager fRCM) and being coimected with the 
secondary storage subsystems, wherein the primary volumes are constituted by the 
primary storage subsystems, and wherein the secondary volimies are constituted by 
the secondary storage subsystems, the software comprising: 

(1) a normal synchronizing module including: 

a module for receiving, at each of the secondary storage subsystems, remote 
copy requests which are each associated with a timestamp from each one of the 
plurality of primary storage subsystems respectively; 

a module for receiving p e riodically , at each of the secondary storage 
subsystems, synchronizing requests each of which is associated with a timestamp and 
a primary storage ID of a primary storage subsystem, which sends a respective 
synchronizing request, from said each one of the primary storage subsystems 
respectively; 

a module for determining, at each of the secondary storage subsystems, a first 
timer as a first time parameter based on the timestamps included in the synchronizing 
requests; and 

a module for determining, at each of the secondary storage subsystems, which 
remote copy requests to process based on the first time parameter, primary storage 
IDs and timestamps associated with the remote copy requests, thereby maintain data 
I/O consistency among said storage subsystems; and 

(2) an after-failm-e synchronizing module including: 

a module for suspending said remote copy requests after a failure occurs; 
a module for collecting and comparing by the RCM in the host computer time 
parameters stored in the secondary storage systems to determine a synchronized time; 
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a module for receiving from the RCM in said host computer at each of the 
secondary storage subsystems synchronizing requests each of which includes said 
synchronized time; 

a module for updating second time parameters at each of the secondary storage 
subsystems up to said synchronized time; and 

a module for determining, at each of the secondary storage subsystems, which 
remote copy requests to process based on said updated second time parameter, 
thereby maintaining data I/O consistency among said storage subsystems. 

9. (Previously Presented) The software of claim 8, wherein the normal synchronizing 
module ftirther includes: 

a module for write processing, at each of the secondary storage subsystems, in 
accordance with remote copy requests that are associated with timestamps indicating 
a earlier time than the first time. 

10. (Previously Presented) The software of claim 8, wherein the normal synchronizing 
module ftirther includes: 

a module for managing, at each of the secondary storage subsystems, a second 
time parameter for each of the primary storage subsystems, and for updating the 
corresponding second time parameters in response to timestamps associated with the 
synchronizing requests that indicate a later time than corresponding second time 
parameters of tiie second storage subsystems. 

1 1 . (Previously Presented) The software of claim 10, wherein the first time is the earliest 
time indicated by the second time parameters. 

12. (Previously Presented) The software of claim 8, wherein the module for determining 
in the after-failure synchronizing module includes a module for updating a secondary 
volume corresponding to the determined remote copy request. 

13. (Previously Presented) The software of claim 8, wherein said module for determining 
in the after-failure synchronizing module includes a module for selecting remote copy 
requests which are received by the secondary storage subsystems prior to the 
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suspension and have a first time parameter smaller than or equal to said S3mchronized 
time to be processed so as to update a corresponding secondary volume. 

14. (Previously Presented) The software of claim 13, wherein remote copy requests which 
are received by the secondary storage subsystems prior to the suspension and have a 
first time parameter bigger than said synchronized time are used to update a bitmap of 
a corresponding secondary storage subsystem. 

15. (Currently Amended) In a system for remotely copying data from each of a pluraUty 
of primary volumes to a corresponding secondary volimie of a plurality of secondary 
volumes implemented in a data storage system that includes a plurality of host 
computers each including a remote copv manager (RCM) . a plurality of primary 
storage subsystems and a plurality of secondary storage subsystems, all connected to 
each other via a network, wherein the primary volumes are constituted by the primary 
storage subsystems, and wherein the secondary volumes are constituted by the 
secondary storage subsystems, each of the host computers implementing said system 
that comprises: 

(1) normal synchronizing means including: 

means for receiving, at each of the secondary storage subsystems, remote copy 
requests which are each associated with a timestamp from each one of the plurality of 
primary storage subsystems; 

means for receiving p e riodically , at each of flie secondary storage subsystems, 
synchronizing requests each of which is associated with a timestamp and a primary 
storage ID of a primary storage subsystem, which sends a respective synchronizing 
request, from said each one of the primary storage subsystems respectively; 

means for determining, at each of the secondary storage subsystems, a first 
timer as a first time parameter based on the timestamps included in the synchronizing 
requests; and 

means for determining, at each of the secondary storage subsystems, which 
remote copy requests to process based on the first time parameter, primary storage 
IDs and timestamps associated with the remote copy requests, thereby maintain data 
I/O consistency among said storage subsystems; and 

(2) after-failure synchronizing means including: 

means for suspending said remote copy requests after a failure occurs; 

6 



means for collecting and comparing the RCM in by the host computer time 
parameters stored in the secondary storage systems to determine a synchronized time; 

means for receiving from the RCM in said host computer at each of the 
secondary storage subsystems synchronizing requests each of which includes said 
synchronized time; 

means for updating second time parameters at each of the secondary storage 
subsystems up to said synchronized time; and 

means for determining, at each of the secondary storage subsystems, which 
remote copy requests to process based on said updated second time parameter, 
thereby maintaining data I/O consistency among said storage subsystems. 

16. (Previously Presented) In a system according to claim 15, wherein the normal 
sjmchronizing means further includes: 

means for write processing, at each of the secondary storage subsystems, in 
accordance with remote copy requests that are associated with timestamps indicating 
an earlier time than the first time. 

17. (Previously Presented) In a system according to claim 15, wherein the normal 
synchronizing means further includes: 

means for managing, at each of the secondary storage subsystems, a second 
time parameter for each of the primary storage subsystems, and for updating the 
corresponding second time parameters in response to timestamps associated with the 
synchronizing requests that indicate a later time than corresponding second time 
parameters of the second storage subsystems. 

18. (Original) In a system according to claim 17, wherein the first time is the earliest time 
indicated by the second time parameters. 

19. (Previously Presented) In a software system according to claim 15, wherein means for 
determining in the after-failure synchronizing means includes means for updating a 
secondary volume corresponding to the determined remote copy request. 
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(Previously Presented) In a system according to claim 15, wherein said means for 
determining in the after-failure synchronizing means includes means for selecting 
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remote copy requests which are received by the secondary storage subsystems prior to 
the suspension and have a first time parameter smaller than or equal to said 
synchronized time to be processed so as to update a corresponding secondary volume. 

(Previously Presented) In a system according to claim 20, wherein remote copy 
requests which are received by the secondary storage subsystems prior to the 
suspension and have a first time parameter bigger than said synchronized time are 
used to update a bitmap of a corresponding secondary storage subsystem. 
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